This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
File:                     2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json)
Hash identifier:          O6GOv0/42pXKluyzuhgYSaVeS5FO5Cl2Huqs/Zp1eoI=
Subject key identifier:   38:E3:23:00:1E:E4:EE:21:69:CD:72:56:D4:D8:CF:A8:75:A2:DF:DD
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Certificate issuer:       /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial:       019BF3F59C99CE84936728B9D8CC828CDE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
Manifest number:          1806
Signing time:             Sun 25 Jan 2026 07:01:58 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:58 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:58 +0000
Files and hashes:         1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: 7w3/0W1vcGD6NqQi7U3ItXj6fYPDPD+00ccv5tMbp+4=)
                          2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=)
                          3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=)
                          4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=)
                          5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=)
                          6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=)
                          7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=)
                          8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=)
                          9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=)
                          10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=)
                          11: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=)
                          12: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=)
                          13: gjhjBLir8IRFlK670wG4nH4oaXk.roa (hash: cv4ygh/KOqNvTQ/oTMBYXfBkQ2u91AyKM5PUQ/5gKm8=)
                          14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:9c:99:ce:84:93:67:28:b9:d8:cc:82:8c:de:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
        Validity
            Not Before: Jan 25 07:01:58 2026 GMT
            Not After : Jan 26 07:01:58 2026 GMT
        Subject: CN=38e323001ee4ee2169cd7256d4d8cfa875a2dfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:94:15:06:4c:fb:28:70:cd:e4:ff:5a:d6:
                    dd:9a:2d:7e:48:e9:d8:e7:b9:b1:12:c1:88:30:77:
                    7a:71:21:79:73:a0:a5:60:36:7d:bb:80:11:86:33:
                    09:25:97:7c:f3:73:74:7c:e8:d8:f2:a3:2e:a5:b9:
                    b3:35:06:f7:58:dc:3a:87:03:46:36:31:d8:c0:71:
                    fb:10:aa:60:aa:be:20:c5:67:5f:74:9d:c9:d7:28:
                    2a:02:f1:f9:95:cc:9c:a1:ea:77:c2:0b:44:c3:1c:
                    ea:1b:3f:fc:75:80:d0:69:dc:95:b5:6a:90:2e:fd:
                    33:98:1f:ce:e2:a7:d2:f0:25:f0:cf:18:07:38:1d:
                    5b:32:39:1b:ba:d3:7b:0d:26:10:42:18:4c:72:fd:
                    9a:85:b7:00:51:69:91:13:73:24:09:8c:47:a6:c6:
                    d4:3c:c4:80:ab:fa:2d:66:84:82:e2:a0:79:48:70:
                    43:c8:98:59:8b:bc:92:66:d5:a5:d9:1a:76:50:0d:
                    7a:28:fb:74:a0:db:5c:8e:03:04:84:b7:5f:9a:c1:
                    ba:d5:75:51:0f:6a:35:c6:d6:04:a8:52:62:db:8e:
                    88:1b:b5:38:e8:8e:6f:c8:cb:ad:d2:9d:c4:8b:c0:
                    d5:dc:20:f3:67:4d:9a:e6:8f:47:c0:ac:5c:38:a1:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E3:23:00:1E:E4:EE:21:69:CD:72:56:D4:D8:CF:A8:75:A2:DF:DD
            X509v3 Authority Key Identifier:
                keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:8e:91:4d:5e:0d:ec:0e:96:bf:3e:27:24:ba:e6:ad:d6:a6:
         e5:28:1c:b0:f3:32:4a:be:5b:ea:4d:e5:2d:48:ad:e5:4b:4f:
         62:e8:1f:98:cb:d5:c9:a9:f0:25:98:73:a9:51:48:cb:fa:9a:
         11:8e:14:a3:66:23:5c:3e:66:60:95:e8:cd:31:69:10:fb:ce:
         c5:49:1e:c4:38:39:da:08:0c:80:9e:ca:1f:06:49:1c:37:dc:
         48:5c:40:34:0e:d0:6b:8a:16:40:8f:d2:c7:35:32:0c:26:6d:
         64:a7:2a:1f:a8:9a:04:62:0d:38:c7:5e:68:eb:8d:36:27:b4:
         46:5a:cb:af:01:9e:4d:d0:8c:9e:13:35:2c:1d:50:d0:96:da:
         c5:36:44:b2:65:7a:4e:36:2a:cb:55:b6:5c:0d:5f:33:4c:a0:
         1d:cf:17:94:35:ae:5b:a5:b6:1c:49:8f:f7:93:46:fb:d0:1b:
         d5:59:af:da:20:35:e9:47:80:ca:52:b2:bf:39:4a:c6:6f:73:
         d9:ba:68:8e:3b:52:68:d4:3d:3c:fe:fc:47:58:4d:47:e3:f8:
         23:93:13:a2:98:14:5d:46:13:5d:30:fc:84:1b:ba:fc:dc:03:
         d9:a6:53:26:62:01:ec:8a:89:6d:55:ef:81:53:ef:87:92:2e:
         b9:c2:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:44:51 2026 by rpki-client